Attached Files:

Have you changed the mail plugin? The plugin that is delivered with ispconfig 3.0.3.3 works fine, so dont change it and use the code ftom ispconfig 3.0.3.3 without changes. Maildir permission 0700 is ok and works fine, as only the vmail user needs to access it.

The reason for this is 2) because the maildir (/var/vmail/test.int/info2) of the newly created user (not updated) is owned by root and not by vmail. So the user vmail is not allowed to access this folder.

1) This seems to be a security issue (0755) for the domain-path (/var/vmail/[Domain] because logged in system users are able to determine the mailadresses of the domain (but does not interferre with functionality - so it's - at the moment - not too important).

I've checked out the system configuration in the ISPConfig control panel and it's set correctly to vmail (I also saved the settings to overwrite wrong settings). Sadly there was no effect (newly created maildirs are still owned by root).

Ok - I did some testing and found the reason which causes this behavior (but I don't know where & when this happens):

When a new maildomain is created and the spamfilter is not activated (during maildomain creation) it causes the described behavior. E.g. all newly created mailboxes are owned by the wrong user.

If the spamfilter is activated, the maildomain-directory has the owner "vmail" permission-set 0700 (and not 0755 - which happens when the spamfilter is not activated) and all mailboxes are created within this domain have the correct owner.

Addition: If the spamfilter is activated when a new mailbox is created in a maildomain which does not use a spamfilter the owner of the maildir is set correctly as well whereas the owner of the maildomain-directory and permissions do not change.

I guess that the maildir with wrong permissions gets created by the lda (deliver if you use dovecot) while the correct one gets created by ispconfig. As ispconfig does not change the directory or permissions when the maildir already exists, then the wrong permissions are kept. what you can try is to add a forced permission update in ispconfig on the maildir path in the insert function of the mail plugin.